Files
volatility3/volatility/framework/automagic
Mike Auty 19f908b075 Rejig pdbscan to find potential offsets then check them.
Originally we found physical offsets for pdbs that matched,
then found potential offsets and tested them against each other.

Now, we find the potential offsets and then look for pdbs at that offset
(technically within a 4Mb block after the start).  The scanning is quick
(probably quicker than scanning the whole physical space) and should
catch most pdbs unless they're splayed out in virtual memory.
2019-01-01 01:14:34 +00:00
..
2018-12-19 23:55:03 +00:00
2018-12-30 15:13:10 +00:00
2018-12-19 23:55:03 +00:00
2018-12-19 23:55:03 +00:00